Could this be missing files??

Teatimecreams · April 17, 2005

Right then....

Im going to sign off....disconnect....

Disable the ethernet adaptor....

Restart the poota in safe mode...

Run the doc.exe...

Then try and re-install in safe mode

Thanks to Nellie as well.. \o

Be back in 10 hopefully... :blink:

x

CurlyWhirly · April 17, 2005

I notice that you are back online. Did it work then?

Teatimecreams · April 17, 2005

:wallbash:

Argggggggggggghhhhhhhhhhhhhhhhhhhhhh

no joy....the very same thing happens.....

:(

Teatimecreams · April 17, 2005

Ermmmmmmmmm just a thought Curly...

i use aol's computer check up....this finds spyware...

Do u suggest i d.load my own spybot or ad-aware?

x

CurlyWhirly · April 17, 2005

I can't help you anymore as I never had that much trouble installing my broadband drivers :blink:

I would contact AOL again and insist that if they can't help you, then you will cancel the contract and move to another ISP?

Just a thought, are you sure that you have no spyware on your PC as if you had a dialler on there (perish the thought), then this could be stopping the modem from installing and changing the default settings? :unsure:

Just a thought though.

CurlyWhirly · April 17, 2005

Ermmmmmmmmm just a thought Curly...
i use aol's computer check up....this finds spyware...
Do u suggest i d.load my own spybot or ad-aware?
x

Sorry to disagree, but AOL's Computer check-up fixes browser and internet connectivity problems and does not search for spyware.

I would definently download Spybot and Ad-Aware and run them as when I first had a PC, I didn't use anti-spyware tools either and my PC was inundated with spyware.

This may be the problem! :unsure:

Teatimecreams · April 17, 2005

Ok......i'll trot off and sort this out...

do u suggest d/loading either or both...and are they freeware?

(jeez...u must be sick to death of me :flowers: )

x

CurlyWhirly · April 17, 2005

Both are free and I have been using them for over 3 years now with no problems at all.

If any spyware is found you may consider downloading SpyWareblaster which stops spyware getting on your PC in the first place from Click here

CurlyWhirly · April 17, 2005

Perhaps you should also post a HiJack this log from Click here

There are also instructions from the link.

Then one of our Spyware Specialists will be able to analyse it for you ;)

CurlyWhirly · April 17, 2005

Teatimecreams, did you have any spyware on your PC after running Spybot and Ad-Aware?

Teatimecreams · April 18, 2005

Good Mawnin Curly...

Ran the spybot prog.....ermmmm 114 problems found...(is that bad?)... :blink:

It has left the following screenshot that havent been 'fixed'....

(tried a reinstall afterwards....to no avail)....

and the beat goes on........(sigh)

x

Teatimecreams · April 18, 2005

Oh gosh this is fun...

I'm sending a s/shot of my i/connections....

which all say 'disconnected' and the ethernet adaptor 'disabled'...

Then how the frigging hell am i online....?(chuckle)

x

:D

Teatimecreams · April 18, 2005

BTW...

The link to the hijack this ..

Please see instructions HERE for instructions on using and posting your HijackThis! log."

Well its broken...so no go on that either....

:unsure:

x

ɹəuəllıʍ ʇɐb · April 18, 2005

The instructions are here.

Then how the frigging hell am i online....?(chuckle)

Maybe through the LAN ?

Teatimecreams · April 18, 2005

Logfile of HijackThis v1.99.1

Scan saved at 10:29:27, on 18/04/2005

Platform: Windows XP SP1 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe

C:\Program Files\Norton AntiVirus\SAVScan.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

C:\gam.exe

C:\Program Files\Zauxsvy\Mctyg.exe

C:\Program Files\Common Files\AOL\ACS\AOLDial.exe

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\Real\RealPlayer\RealPlay.exe

C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe

C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe

C:\Program Files\AOL 9.0a\aoltray.exe

C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe

C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe

C:\PENSOFT\fquick32.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\AOL\Broadband CheckUp\bin\mpbtn.exe

C:\Program Files\AOL Companion\companion.exe

C:\Program Files\Norton AntiVirus\navapsvc.exe

C:\WINDOWS\System32\wuauclt.exe

C:\WINDOWS\SoftwareDistribution\Download\3ab3c750096febe50fc47ce46ea0b9dc\update\update.exe

C:\Program Files\AOL 9.0a\waol.exe

C:\Program Files\AOL 9.0a\shellmon.exe

C:\Program Files\Common Files\AOL\aoltpspd.exe

C:\Documents and Settings\sam\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.timecomputers.com

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll

O4 - HKLM\..\Run: [VTTimer] VTTimer.exe

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [supaDial] C:\Program Files\SupaDial\SupaDial.exe /A

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [Windows Media Player] msa.exe

O4 - HKLM\..\Run: [Windows SSL File] winssv.exe

O4 - HKLM\..\Run: [uSBHWDRV] C:\gam.exe

O4 - HKLM\..\Run: [uSBHWINFO] C:\sst6.exe

O4 - HKLM\..\Run: [Microsofts media] winmplayd.exe

O4 - HKLM\..\Run: [NvCplScan] msc32.exe

O4 - HKLM\..\Run: [fwfghaz] C:\WINDOWS\fwfghaz.exe

O4 - HKLM\..\Run: [bearShare] "C:\Program Files\BearShare\BearShare.exe" /pause

O4 - HKLM\..\Run: [N4uL] C:\WINDOWS\elxaro.exe

O4 - HKLM\..\Run: [sSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe

O4 - HKLM\..\Run: [¢‰¸u0–4C

}ïÁzî[8C:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\elxaro.exe

O4 - HKLM\..\Run: [¢‰¸u0Ô@ÔÁß]ú"ü‰üžiC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\elxaro.exe

O4 - HKLM\..\Run: [Ebjbfo] C:\Program Files\Zauxsvy\Mctyg.exe

O4 - HKLM\..\Run: [¢‰¸u0Ô@ÔÁß]ú"ü‰¸u0C:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\elxaro.exe

O4 - HKLM\..\Run: [¢‰¸u0ÔÁß]ú"ü‰üžigÝC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\elxaro.exe

O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER

O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"

O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe

O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe

O4 - HKLM\..\RunServices: [Windows Media Player] msa.exe

O4 - HKLM\..\RunServices: [Windows SSL File] winssv.exe

O4 - HKLM\..\RunServices: [Microsofts media] winmplayd.exe

O4 - HKLM\..\RunServices: [NvCplScan] msc32.exe

O4 - HKCU\..\Run: [Windows SSL File] winssv.exe

O4 - HKCU\..\Run: [Windows Media Player] msa.exe

O4 - HKCU\..\Run: [NvCplScan] msc32.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - Startup: Quick StartUp.lnk = C:\PENSOFT\fquick32.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

O4 - Global Startup: AOL 9.0 Tray Icon.lnk = C:\Program Files\AOL 9.0a\aoltray.exe

O4 - Global Startup: AOL Companion.lnk = C:\Program Files\AOL Companion\companion.exe

O4 - Global Startup: AOL Broadband Check-Up.lnk = C:\Program Files\AOL\Broadband CheckUp\bin\matcli.exe

O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe

O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe

O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML

O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll

O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE

O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE

O14 - IERESET.INF: START_PAGE_URL=http://www.timecomputers.com

O16 - DPF: {00000000-0000-0000-0000-000020040000} - http://207.234.185.217/ABoxInst_int4.exe

O16 - DPF: {0ED74E87-6693-2E44-2E33-5121669B6BC9} - http://66.117.37.5/1/rdgGB298.exe

O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aolsvc.aol.co.uk/computercheckup/qdiagcc.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1112132257171

O17 - HKLM\System\CCS\Services\Tcpip\..\{ED3D575B-15BF-488A-8EAC-E9600EE40074}: NameServer = 205.188.146.145

O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe

O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\\aolserv.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe

O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe

O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

nellie2 · April 18, 2005

I'm afraid you have a few problems there... I don't know if they are related to your connection problems but we need to get you cleaned up.

BearShare isn't a good choice for a p2p program and I recommend you uninstall it. This article is a bit old now but the information there is still valid. See here for spyware free alternatives

You are running hijackthis from a temporary directory and from inside the zip. please move HijackThis into a permanent folder. It is important that you run HijackThis.exe in its own folder so the backup files that HijackThis file will create will not be accidentally deleted on reboot.

Open 'My Computer', then double-click to open C:\ (or the drive letter that your Windows is installed)

In the menu bar, click File-->New-->Folder.

That will create a folder named New Folder, which you can rename to "HJT" or "HijackThis". Now you have C:\HJT\ or C:\HijackThis\ folder. Put your HijackThis.exe there.

Run hijackthis and click the scan button, when it has finished scanning then put a tick against the following, close all other browsers and windows and click 'fix checked'

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank

O4 - HKLM\..\Run: [Windows Media Player] msa.exe

O4 - HKLM\..\Run: [Windows SSL File] winssv.exe

O4 - HKLM\..\Run: [uSBHWDRV] C:\gam.exe

O4 - HKLM\..\Run: [uSBHWINFO] C:\sst6.exe

O4 - HKLM\..\Run: [Microsofts media] winmplayd.exe

O4 - HKLM\..\Run: [NvCplScan] msc32.exe

O4 - HKLM\..\Run: [fwfghaz] C:\WINDOWS\fwfghaz.exe

O4 - HKLM\..\Run: [N4uL] C:\WINDOWS\elxaro.exe

O4 - HKLM\..\Run: [¢‰¸u0–4C

}ïÁzî[8C:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\elxaro.exe

O4 - HKLM\..\Run: [¢‰¸u0Ô@ÔÁß]ú"ü‰üžiC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\elxaro.exe

O4 - HKLM\..\Run: [Ebjbfo] C:\Program Files\Zauxsvy\Mctyg.exe

O4 - HKLM\..\Run: [¢‰¸u0Ô@ÔÁß]ú"ü‰¸u0C:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\elxaro.exe

O4 - HKLM\..\Run: [¢‰¸u0ÔÁß]ú"ü‰üžigÝC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\elxaro.exe

O4 - HKLM\..\RunServices: [Windows Media Player] msa.exe

O4 - HKLM\..\RunServices: [Windows SSL File] winssv.exe

O4 - HKLM\..\RunServices: [Microsofts media] winmplayd.exe

O4 - HKLM\..\RunServices: [NvCplScan] msc32.exe

O4 - HKCU\..\Run: [Windows SSL File] winssv.exe

O4 - HKCU\..\Run: [Windows Media Player] msa.exe

O4 - HKCU\..\Run: [NvCplScan] msc32.exe

O16 - DPF: {00000000-0000-0000-0000-000020040000} - http://207.234.185.217/ABoxInst_int4.exe

Then reboot into safe mode, you may have to enable hidden files and folders and delete the following

C:\gam.exe

C:\sst6.exe

C:\WINDOWS\fwfghaz.exe

C:\WINDOWS\elxaro.exe

C:\Program Files\ISTsvc\istsvc.exe

C:\WINDOWS\elxaro.exe

You will also need to use the Windows Search facility to find and delete these files

msa.exe

winssv.exe

winmplayd.exe

msc32.exe

When done then reboot and post a fresh log pleae

CurlyWhirly · April 22, 2005

Did you follow Nellie2's instructions?

Sign In

Could this be missing files??

Recommended Posts

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Join the conversation

Important Information